host: localhost
port: <%= nats_port %>
logtime: true

log_file: "<%= nats_log_path %>"

authorization {

  # Allow all users to publish or subscribe to any channel. This is required
  # because the integration tests need a user with these permissions, but
  # the NATS Sync process does not allow custom users.
  default_permissions = {
    publish = [">"]
    subscribe = [">"]
  }

  timeout: 5
}

tls {
  cert_file: "<%= nats_certificate_paths['server']['certificate_path'] %>"
  key_file:  "<%= nats_certificate_paths['server']['private_key_path'] %>"
  ca_file:   "<%= nats_certificate_paths['ca_path'] %>"
  verify_and_map: true
  timeout: 5
}

ping_interval: 5s
ping_max: 2
max_payload: 1048576
